Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
File:                     323830343a366630303a3a2f33322d3438203d3e20323730363332.roa (raw, json)
Hash identifier:          9/ydqs09pajqPf5M+OzfD4pqeiBaxegv9Zzo8/Jhk/A=
Subject key identifier:   C1:C0:F0:4E:66:6C:0A:D0:C2:B3:93:87:A8:AC:0A:0D:E7:35:AC:4D
Certificate issuer:       /CN=EB2C362543491CC1147C06C78106957C5F504A23
Certificate serial:       4C219DF8C99002F0078AC2C8E82953A2A449B5AA
Authority key identifier: EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     270632
IP address blocks:        2804:6f00::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl
                          rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Wed 23 Apr 2025 03:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:21:9d:f8:c9:90:02:f0:07:8a:c2:c8:e8:29:53:a2:a4:49:b5:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB2C362543491CC1147C06C78106957C5F504A23
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:f8:fe:f5:91:d6:d8:4e:3b:53:cf:df:da:
                    74:f2:e1:05:02:4d:5b:9d:cb:27:67:4e:4b:1e:69:
                    db:47:ec:71:bf:ad:b3:7e:6b:44:43:3d:86:13:07:
                    73:9e:08:bc:bc:2b:4f:6b:2d:4d:37:1b:ff:4f:ab:
                    48:4a:a8:37:9e:92:04:19:6e:94:e8:2b:aa:d6:cf:
                    de:2c:88:f0:ea:c4:08:de:79:d9:e1:2b:67:1e:27:
                    2c:7d:db:27:f4:ec:a1:52:83:4e:bd:1e:1c:60:a4:
                    a6:ba:fd:ab:f9:d6:d3:0d:50:96:9e:b8:96:ad:50:
                    76:a9:1a:96:45:27:0a:bb:8e:d7:1e:e2:47:1b:f1:
                    09:92:d4:1f:27:a5:05:11:bd:3e:53:d4:a1:5e:50:
                    9c:b4:af:81:dc:47:f3:d9:95:c6:ae:52:af:fd:c9:
                    92:2e:4a:1b:fc:2c:0e:02:33:df:e4:5d:82:52:11:
                    cc:c5:a2:48:0c:7e:56:b1:9f:55:e1:d9:f2:b7:5e:
                    f1:63:fc:79:23:f0:85:2a:bf:41:7f:7c:41:5b:49:
                    e3:2d:2b:bb:9e:7a:ad:12:63:ec:c5:00:97:da:6d:
                    5a:6c:26:c7:88:f4:fe:f1:c1:e7:c7:21:90:04:39:
                    e0:0b:0d:d5:79:e1:55:00:16:53:14:7a:12:fa:3e:
                    ba:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:F0:4E:66:6C:0A:D0:C2:B3:93:87:A8:AC:0A:0D:E7:35:AC:4D
            X509v3 Authority Key Identifier:
                keyid:EB:2C:36:25:43:49:1C:C1:14:7C:06:C7:81:06:95:7C:5F:50:4A:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/EB2C362543491CC1147C06C78106957C5F504A23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EB2C362543491CC1147C06C78106957C5F504A23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDAFCGMGsgru1eyDkey3pHdCXKYc32Uwy1Twq7vAiska/3/323830343a366630303a3a2f33322d3438203d3e20323730363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         8d:d8:d3:22:b0:61:44:43:4c:40:b1:da:fb:b1:ea:ef:ae:d0:
         3c:f7:5c:35:3a:72:ea:f0:4d:6c:45:d3:1f:35:ce:48:39:56:
         ed:47:16:40:06:e3:0b:a6:d1:a1:57:c1:39:1b:99:9b:32:78:
         88:4a:36:aa:a1:ab:6d:b7:69:08:54:1f:47:8e:ce:df:eb:3b:
         cd:b6:b7:b8:1c:9c:93:2c:c0:86:55:78:cd:03:d4:3a:b4:f6:
         bf:f1:85:8c:a7:db:40:4c:83:e9:46:db:84:a7:81:e9:2d:77:
         4e:08:c3:fc:19:15:72:d0:f8:fa:1a:bf:1b:0d:ff:61:f2:22:
         48:48:0b:bd:e2:5c:98:10:e2:05:f8:7a:9d:ab:7d:78:e1:c3:
         b9:e1:0f:61:8d:00:f3:63:36:bb:90:31:2b:28:62:96:01:5a:
         e7:34:af:4f:84:a8:ea:95:19:ab:f6:aa:96:e5:7b:ef:ae:0e:
         44:5f:43:08:bd:f7:98:4a:38:d2:0a:0f:7c:eb:74:22:e5:d5:
         f5:0c:9b:e1:13:99:5c:a3:5e:7c:bd:fd:f9:2f:95:cd:1b:e7:
         2b:f0:92:a0:51:ff:c8:b2:b4:cf:9b:91:bb:29:0a:63:e1:3c:
         bf:8c:ec:ea:8d:05:c0:41:45:11:60:dd:7c:91:38:d5:7c:a4:
         df:b3:39:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:32:04 2025 by rpki-client